Hi David, Basically I want an email whenever an event matching the criteria hits that > stream. One email per event. Does anyone know if that's possible?
That's currently not possible. Cheers, Jochen On Tuesday, 12 April 2016 19:43:31 UTC+2, David Rux wrote: > > Hey all, > > I have a stream that's set to send an email whenever an alert is triggered > that matches a channel. The email is received and all is well but graylog > seems to group a series of events together before sending the email. Is > there any way to change this? Basically I want an email whenever an event > matching the criteria hits that stream. One email per event. Does anyone > know if that's possible? My alert condition is as follows: > > Trigger alert when a message arrives that has the field > > > set to and > then wait at least minutes until triggering a new alert. (grace period) > When sending an alert, include the last messages of the stream evaluated > for this alert condition. > > I would have thought that a 0 minute grace period would do this but I > tested it and graylog lumped 4 backlog messages into the email where I > wanted 4 emails with one event in each. When I set the number of included > messages to 1, I only get one email with one alert and it seems to ignore > the other events that I triggered despite being logged on the dashboard. > > Thanks, > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/98539d17-877b-4e58-849f-b85ef20bda53%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
